$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0cce162-369c-3645-8b8e-3e3664dbc14b.roa File: b0cce162-369c-3645-8b8e-3e3664dbc14b.roa (raw, json) Hash identifier: Gntd0ILIgc+zrU35ntFt31cn32g8HT/VyJKKdZZGdjQ= Subject key identifier: 29:80:01:B2:C3:1F:AC:F9:30:F0:44:0E:FA:CF:A7:FC:CE:EF:EE:7A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36DFD5858E0CE9A3C32500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0cce162-369c-3645-8b8e-3e3664dbc14b.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 16625 IP address blocks: 23.43.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:df:d5:85:8e:0c:e9:a3:c3:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=c6e29d2a-4a49-40f3-90ed-35b94b259bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:67:c6:0c:79:c5:08:e7:7a:bc:36:fc:d0: 5c:a3:69:90:ce:b4:b7:c8:9e:9f:45:e5:d9:32:d1: f0:22:3b:f6:da:9b:0e:38:95:5d:9f:87:cb:87:29: 77:6b:50:0e:29:b7:c2:bc:54:cf:55:7e:a8:33:09: c8:20:89:b1:fa:d9:f6:d5:8c:50:bb:77:29:aa:83: 15:e3:5e:67:75:5b:01:8b:29:d5:5a:a8:13:4c:ce: 67:42:2d:9f:77:a6:21:c7:33:a6:71:57:97:b8:dc: c4:67:b2:26:db:75:c5:a5:d6:98:47:b0:27:4e:91: d2:1d:33:5d:8f:82:de:38:14:f1:bb:23:37:cd:c6: ad:2e:9e:d6:44:8b:2f:4f:16:95:d4:84:8c:08:a6: 82:50:80:45:fe:b1:62:57:56:e2:b6:7e:a0:f7:c2: f5:23:b8:02:60:a3:7a:14:7b:49:bc:c9:d7:b3:3d: d2:7b:78:fc:e9:0c:02:b6:d2:e0:40:be:2e:99:0b: 01:c8:2a:82:44:d6:9b:27:6b:38:71:e2:ec:fd:e0: 8a:df:67:db:cd:07:82:41:88:bc:e8:75:ce:49:9b: 1d:8e:d4:5a:1f:c3:5e:13:50:70:d4:b6:aa:3b:bd: b1:e3:28:5f:d3:51:1c:34:30:22:c2:ad:b9:98:23: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:80:01:B2:C3:1F:AC:F9:30:F0:44:0E:FA:CF:A7:FC:CE:EF:EE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0cce162-369c-3645-8b8e-3e3664dbc14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c5:c5:ee:d6:ac:e5:0b:11:2e:8f:73:40:c0:03:18:68:4a: 18:5e:56:b4:68:ab:52:0d:cf:da:f4:5b:ec:a4:09:41:1e:8f: 65:82:c9:28:32:23:2a:83:3e:f1:60:70:e4:77:3e:74:b0:f9: 88:fb:69:60:78:ba:8b:9f:55:a3:a7:72:e9:de:ea:b1:aa:e6: f2:40:45:e1:b9:e1:2d:48:a2:b7:95:0b:3a:65:ee:51:fb:7a: 90:1a:24:7f:3a:52:85:1e:9a:50:9c:ad:32:6d:b5:0d:69:6c: 07:07:4c:20:df:20:51:ba:91:89:0f:f4:92:97:eb:40:28:90: c2:3e:17:f2:ce:0d:3b:59:7c:eb:db:be:e7:82:cb:90:0e:7d: 05:94:ef:fa:aa:6c:6a:81:fe:cf:f5:ec:b2:7c:63:9f:eb:67: 64:60:cd:9b:fe:21:c0:42:11:b9:f3:26:99:e1:4a:74:27:b5: e4:e4:ff:c8:72:b8:44:15:2c:f8:41:0c:4d:3f:e3:9a:bb:af: 5a:d1:c8:c0:41:b0:9f:c5:2a:71:c0:e6:31:df:88:ff:b0:dc: 62:1e:d9:75:41:ff:4e:b7:51:10:8e:e7:5d:41:33:6a:ee:02: f7:e2:f9:6f:23:43:b7:ce:5b:80:c0:28:ee:ac:a7:8c:8a:55: 30:95:d0:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNt/VhY4M6aPDJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk YzZlMjlkMmEtNGE0OS00MGYzLTkwZWQtMzViOTRiMjU5YmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgJnxgx5xQjnerw2/NBco2mQzrS3yJ6fReXZ MtHwIjv22psOOJVdn4fLhyl3a1AOKbfCvFTPVX6oMwnIIImx+tn21YxQu3cpqoMV 415ndVsBiynVWqgTTM5nQi2fd6YhxzOmcVeXuNzEZ7Im23XFpdaYR7AnTpHSHTNd j4LeOBTxuyM3zcatLp7WRIsvTxaV1ISMCKaCUIBF/rFiV1bitn6g98L1I7gCYKN6 FHtJvMnXsz3Se3j86QwCttLgQL4umQsByCqCRNabJ2s4ceLs/eCK32fbzQeCQYi8 6HXOSZsdjtRaH8NeE1Bw1LaqO72x4yhf01EcNDAiwq25mCPMxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmAAbLDH6z5MPBEDvrPp/zO7+56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBjY2UxNjItMzY5Yy0z NjQ1LThiOGUtM2UzNjY0ZGJjMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFysIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPFxe7WrOULES6Pc0DAAxhoShheVrRoq1INz9r0W+ykCUEej2WCySgy IyqDPvFgcOR3PnSw+Yj7aWB4uoufVaOncune6rGq5vJAReG54S1IoreVCzpl7lH7 epAaJH86UoUemlCcrTJttQ1pbAcHTCDfIFG6kYkP9JKX60AokMI+F/LODTtZfOvb vueCy5AOfQWU7/qqbGqB/s/17LJ8Y5/rZ2RgzZv+IcBCEbnzJpnhSnQnteTk/8hy uEQVLPhBDE0/45q7r1rRyMBBsJ/FKnHA5jHfiP+w3GIe2XVB/063URCO511BM2ru Avfi+W8jQ7fOW4DAKO6sp4yKVTCV0Do= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:59 2025 by rpki-client